[java-sig-commits] [Bug 1321789] CVE-2016-3674 XStream: enabled processing of external entities